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- Extensions of time may be available under the provisions of 37 CFR 1 .136(a). In no event, however, may a reply be timely filed 
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DETAILED ACTION 

1 . Claims 1 and 2 have been amended and new claims 3-6 have been added on an 
amendment filed on October 10, 2004. Claims 1-6 are pending. 

Claim Rejections - 35 USC § 103 

2. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

3. Claims 1-6 are rejected under 35 U.S.C. 103(a) as being unpatentable over Roger R. 
Dingledine, "The Free Haven Project: Design and Deployment of Anonymous Secure Data 
Haven", May 22, 2000 (hereinafter Roger) in view of Matyas et al "A key-management scheme 
based on control vectors", IBM Systems Journal, Vol. 30, No 2, 1991 (hereinafter Matyas). 

4. As per claim 1, Roger teaches a system to establish a trusted and decentralized peer-to- 
peer network comprising: 

communication means [page 55, paragraph 2]; 

n user computing devices connected to the communication means, where n is greater 
than or equal to 1 and is an integer [page 55, paragraphs 2 & 3]; and 
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a host computing device connected to the communication means having a mechanism 
to establish a decentralized trusted communication network with at least 2 of the n users 
computing devices through which digital signals are shared securely between the host 
computing device the 2 users computing devices of the trusted communication network [page 
55, paragraphs 3 & 4 and page 7]. Roger does not explicitly teach sending a public key to a first 
of the 2 user computer devices and the first user computing device sending a public key to a 
second of the 2 user computer devices through the communication means to establish the 
decentralized trusted network. However, peer-to-peer key distribution method is well known in 
the art. For example Matyas teaches a peer-to-peer key distribution method including, a host 
computer sending a public key to a first of the 2 computing devices [see, for example figure 
page 185, figure 7, C sends key to A] and the first computing device sending the public key to a 
second of the 2 computer devices [see for example, page 185, figure 7, A sends key to B] 
through the communication means to establish the decentralized trusted network [pages 185- 
186 Key-distribution environments, peer to peer and key distribution center]. One of ordinary 
skill in the art would have been able to modify the teachings of Matyas within Roger in order to 
distribute encryption keys in peer-to-peer environment. Therefore it would have been obvious to 
one having ordinary skill in the art at the time the invention was made to employ the key 
distribution method taught by Matyas within the secure decentralized system of Roger to 
achieve the advantage of providing key distribution in peer-to-peer environment between peer 
computing devices. 

5. As per claim 2, Roger teaches, a method of establishing a trusted and decentralized 
peer-to-peer network comprising the steps of: 
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sending a public key from a host computing device to communication means connected 
to the host computing device [page 72, paragraph 1]; 

receiving the public key at a first user computing device connected to the communication 
means [page 72, paragraph 1 and 2]; 

receiving the public key at a second user computing device to establish a decentralized 
trust communication network between the host computing device, the first and the second 
computing device through which digital signals are shared securely between the host computing 
device, the first user computing and second user computing device, sending digital signals 
directly from the first user computing device securely to the second user computing device 
[page 55, paragraph 4 and page 60, paragraph 4]. 

Roger does not explicitly teach sending a public key to a first of the 2 user computer 
devices and the first user computing device sending a public key to a second of the 2 user 
computer devices through the communication means to establish the decentralized trusted 
network. However, peer-to-peer key distribution method is well known in the art. For example 
Matyas teaches a peer-to-peer key distribution method including, a host computer sending a 
public key to a first of the 2 computing devices [see, for example figure page 185, figure 7, C 
sends key to A] and the first computing device sending the public key to a second of the 2 
computer devices [see for example, page 185, figure 7, A sends key to B] through the 
communication means to establish the decentralized trusted network [pages 185-186 Key- 
distribution environments, peer to peer and key distribution center]. One of ordinary skill in the 
art would have been able to modify the teachings of Matyas within Roger in order to distribute 
encryption keys in peer-to-peer environment. Therefore it would have been obvious to one 
having ordinary skill in the art at the time the invention was made to employ the key distribution 
method taught by Matyas within the secure decentralized system of Roger to achieve the 
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advantage of providing key distribution in peer-to-peer environment between peer computing 
devices. 

6. As per claim 3, the combination of Roger and Matyas teaches the method as applied 
above. Furthermore, Matyas teaches creating encryption and decryption keys [page 185-186 
Key-distribution environments, peer to peer and key distribution center], 

7. As per claims 4 and 5, the combination of Roger and Matyas teaches the method as 
applied above. Furthermore, Roger teaches the method including creating a searchable 
ciphertext containing identifiable network information on each computing device which is shared 
with every other computing device [page 60, paragraphs 3-5]. 

8. As per claim 6, the combination of Roger and Matyas teaches the method as applied 
above. Furthermore, Roger teaches the method including the step of finding by a member of the 
trusted peer-to-peer network other members of the trusted peer-to-peer network [page 60. 
paragraphs 3-5]. 

9. Claims 1-3 are rejected under 35 U.S.C. 103(a) as being unpatentable over Olson et al. 
(U.S. Patent No. 6,31 1,209 B1) (hereinafter Olson) in view of Matyas et al "A key-management 
scheme based on control vectors", IBM Systems Journal, Vol. 30, No 2, 1991 (hereinafter 
Matyas). 

10. As per claim 1, Olson teaches a system to establish a trusted and decentralized peer-to- 
peer network comprising: 
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communication means [figure 1, unit 12]; 

n user computing devices connected to the communication means, where n is greater 
than or equal to 1 and is an integer [figure 1 units 14, 16 and 18]; and 

a host computing device connected to the communication means having a mechanism 
to establish a decentralized trusted communication network with at least 2 of the n users 
computing devices through which digital signals are shared (i.e. each client maintaining a copy 
of data throughout an application session, and each time client changes application data the 
change is communicated to all other clients, e.g. client A, B and C of Fig 1 maintaining a copy of 
data at elements 20, 22 and 24) [column 6, lines 29-41] securely between the host computing 
device and the 2 users computing devices of the trusted communication network [column 3, 
lines 30-41, column 6, lines 47-53 and column 2, lines 22-27]. 

Olson does not explicitly teach sending a public key to a first of the 2 user computer 
devices and the first user computing device sending a public key to a second of the 2 user 
computer devices through the communication means to establish the decentralized trusted 
network. However, peer-to-peer key distribution method is well known in the art. For example 
Matyas teaches a peer-to-peer key distribution method including, a host computer sending a 
public key to a first of the 2 computing devices [see, for example figure page 185, figure 7, C 
sends key to A] and the first computing device sending the public key to a second of the 2 
computer devices [see for example, page 185, figure 7, A sends key to B] through the 
communication means to establish the decentralized trusted network [pages 185-186 Key- 
distribution environments, peer to peer and key distribution center]. One of ordinary skill in the 
art would have been able to modify the teachings of Matyas within the system of Olson in order 
to distribute encryption keys in peer-to-peer environment. Therefore it would have been obvious 
to one having ordinary skill in the art at the time the invention was made to employ the key 
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distribution method taught by Matyas within the secure decentralized system of Olson to 
achieve the advantage of providing key distribution in peer-to-peer environment between peer 
computing devices. 

11. As per claim 2, Olson teaches a method of establishing a trusted and decentralized 
peer-to-peer network comprising the steps of: 

sending a public key from a host computing device to communication means connected 
to the host computing device [column 3, lines 35-40]; 

establishing a decentralized trust communication network between the host computing 
device, a new client and existing clients by forwarding the public key to the new and existing 
clients [column 3, lines 35-40 and column 8, lines 12-21] through which digital signals are 
shared (i.e. each client maintaining a copy of data throughout an application session, and each 
time client changes application data the change is communicated to all other clients e.g. client 
A, B and C of Fig 1 maintaining a copy of data at elements 20, 22 and 24) [column 6, lines 29- 
41] securely between the host computing device and the client computing devices, and sending 
digital signals directly from the user computing device securely to the second computing device 
[column 3, lines 30-42, column 6, lines 47-53 and column 2, lines 22-27]. 

Olson does not explicitly teach sending a public key to a first of the 2 user computer 
devices and the first user computing device sending a public key to a second of the 2 user 
computer devices through the communication means to establish the decentralized trusted 
network. However, peer-to-peer key distribution method is well known in the art. For example 
Matyas teaches a peer-to-peer key distribution method including, a host computer sending a 
public key to a first of the 2 computing devices [see, for example figure page 185, figure 7, C 
sends key to A] and the first computing device sending the public key to a second of the 2 
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computer devices [see for example, page 185, figure 7, A sends key to B] through the 
communication means to establish the decentralized trusted network [pages 185-186 Key- 
distribution environments, peer to peer and key distribution center]. One of ordinary skill in the 
art would have been able to modify the teachings of Matyas within the method of Olson in order 
to distribute encryption keys in peer-to-peer environment. Therefore it would have been obvious 
to one having ordinary skill in the art at the time the invention was made to employ the key 
distribution method taught by Matyas within the secure decentralized system of Olson to 
achieve the advantage of providing key distribution in peer-to-peer environment between peer 
computing devices. 

12. As per claim 3, the combination of Olson and Matyas teaches the method as applied 
above. Furthermore, Matyas teaches creating encryption and decryption keys [page 185-186 
Key-distribution environments, peer to peer and l<ey distribution center]. 

Response to Arguments 

13. Applicant's arguments with respect to claims 1-2 have been considered but are moot in 
view of the new ground(s) of rejection. 

Conclusion 

14. Applicant's amendment necessitated the new ground(s) of rejection presented in this 
Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP § 706.07(a). 
Applicant is reminded of the extension of time policy as set forth in 37 CFR 1 .136(a). 
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A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1.136(a) will be calculated from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than SIX MONTHS from the date of this 
final action. 

Any inquiry concerning this communication or eariier communications from the examiner 
should be directed to Beemnet W Dada whose telephone number is (571 ) 272-3847. The 
examiner can normally be reached on Monday - Friday (9:00 am - 5:30 pm). 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kim Y Vu can be reached on (571) 272-3859. The fax phone number for the 
organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private 
PAIR system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 



January 5, 2005 



Beemnet Dada 




SUPERVISORY PATENT EXAMINER 
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